An alternative plan for principal mapping

Henry B. Hotz hotz at
Tue Aug 1 13:46:33 EDT 2006

On Aug 1, 2006, at 9:03 AM, krbdev-request at wrote:

> Date: Mon, 31 Jul 2006 20:48:17 -0500
> From: Will Fiveash <William.Fiveash at>
> Subject: Re: An alternative plan for principal mapping
> To: Rahul Srinivas <srahul at>
> Cc: krbdev at
> Message-ID: <20060801014817.GA17901 at>
> Content-Type: text/plain; charset=us-ascii


> This relates to something I brought up before on this list and that is
> support for login policy plugins (LPP).  Note, this is distinct from
> password policy.  The KDC would interact with a LPP in two ways:

In effect this is an authorization policy, not an authentication policy.

The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz at, or hbhotz at

More information about the krbdev mailing list